fastd - Fast and Secure Tunnelling Daemon

Age	Commit message (Collapse)	Author
2013-11-02	Correctly handle ciphers without implementation	Matthias Schiffer

2013-11-02	Implement the first step towards a more flexible way to support crypto methods	Matthias Schiffer

2013-11-01	Add missing const attribute to secret argument of the session init functions	Matthias Schiffer

2013-11-01	Implement new session init API	Matthias Schiffer

2013-10-31	Implement HKDF	Matthias Schiffer

2013-10-31	Rename session_init to session_init_compat to prepare for the upcoming new ↵	Matthias Schiffer
	key derivation scheme
2013-10-29	Rename fastd_parse_method_name to fastd_method_get_by_name	Matthias Schiffer

2013-10-29	Handle methods as strings	Matthias Schiffer

2013-10-16	Add `secure handshakes' option (without effect for now)	Matthias Schiffer
	Not setting the option produces a warning (so not having it set is deprecated now), so we can change the default from no to yes in a few release cycles.
2013-10-16	Initiate handshake when a packet can't be sent because the local address is ↵	Matthias Schiffer
	invalid
2013-09-03	Add packet/byte statistics	Matthias Schiffer

2013-08-29	Don't initialize monotone timestamps with zero	Matthias Schiffer
	The monotone timestamp is near zero on linux systems, confusing fastd.
2013-08-29	Replace old task queue	Matthias Schiffer
	The handshakes are now schedules in a doubly-linked list that is maintained as a part of the peer structure.
2013-08-29	Simplify keepalive sending	Matthias Schiffer
	By using a global keepalive timer, the O(n) keepalive queue purge operation on every send operation is avoided.
2013-08-28	ec25519: ensure old sessions are invalidated quickly after a new one has ↵	Matthias Schiffer
	been established
2013-08-27	Introduce new log level debug2 for potentially very frequent messages	Matthias Schiffer

2013-08-20	Prevent zero-before-free operations from being optimized out	Matthias Schiffer

2013-08-20	Fix lots of -Wextra warnings	Matthias Schiffer
	Everything clang and GCC warn about, except GCC's missing-field-initializers which are just stupid as they don't allow {} syntax to zero a field.
2013-08-12	Add pre-up and post-down handlers	Matthias Schiffer

2013-08-07	Use multi-af tun mode on FreeBSD to make IPv6 work on tun	Matthias Schiffer

2013-08-07	Move tun/tap initialization to a dedicated source file	Matthias Schiffer

2013-08-07	Move some includes to compat.h	Matthias Schiffer

2013-08-07	Guard socket options not available on FreeBSD	Matthias Schiffer

2013-08-07	Add some compatiblity definitions for FreeBSD	Matthias Schiffer

2013-08-07	Reorder includes to make FreeBSD happy	Matthias Schiffer

2013-08-07	Use netinet/if_ether.h instead of linux/if_ether.h	Matthias Schiffer

2013-07-25	Move command line handling out of config.c	Matthias Schiffer

2013-07-25	Move more code out of fastd.c	Matthias Schiffer

2013-07-25	Move send functions out of fastd.c	Matthias Schiffer

2013-07-25	Move socket handling out of fastd.c	Matthias Schiffer

2013-07-25	Improve handling of similar remote resolves	Matthias Schiffer

2013-07-25	Set IP_MTU_DISCOVER on sockets	Matthias Schiffer

2013-07-25	Introduce tristate type	Matthias Schiffer

2013-07-24	Allow specifying multiple remote entries for a single peer	Matthias Schiffer

2013-07-23	Don't trigger a resolve when a packet from an unknown peer is received	Matthias Schiffer

2013-05-20	Add send_all() function to reduce duplicate code	Matthias Schiffer

2013-05-19	Simplify handling of received packets	Matthias Schiffer

2013-04-24	String stack buffer sizes must be aligned because of optimized strlen builtins.	Matthias Schiffer

2013-04-22	Miscellaneous fixes in ethernet address handling	Matthias Schiffer
	Check the length of ethernet frames, and the fastd_eth_addr_t structure must be packed.
2013-04-20	Just some whitespace fixes	Matthias Schiffer

2013-04-20	Greatly improve handling of hosts with multiple IP addresses	Matthias Schiffer

2013-04-17	Fix handling of the local address in shell commands	Matthias Schiffer
	Without this fix, using on-establish/disestablish/verify would cause a strange zero port when a bind with a random port was used, and a segmentation fault with dynamic binds.
2013-03-09	Add options to hide IP and MAC addresses from log output	Matthias Schiffer

2013-03-08	Handle duplicate keys	Matthias Schiffer
	When two peers are configured with the same key, disable both. When a temporary peer's key is configured, delete the temporary key.
2013-03-04	Load peer dirs in the last step of the configuration	Matthias Schiffer
	Loading the peer dirs directly led to peers being discovered in a different order after reconfigure.
2013-03-03	Make 'peer limit 0' allow no connections	Matthias Schiffer

2013-03-02	Print error message on aborts due to buffer push/pull errors	Matthias Schiffer

2013-03-01	Identify peers be key in log output when no name is available	Matthias Schiffer

2013-02-27	Don't set the peer address for temporary peers before the session is ↵	Matthias Schiffer
	actually established Doing so could lead to duplicate address entries in different peers, causing very strange behaviour. Add additional parameters for the local and the peer address to fastd_shell_exec() to allow the on-verify script to use this information nevertheless.
2013-02-26	Experimental support for accepting connections from unknown peers	Matthias Schiffer